My real question with GDPR is: how do I honor data subjects' rights to erasure if we're all just living in a simulation?